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AMENDMENTS TO CLAIMS 

The following listing of claims replaces all previous versions and listings of claims in the 
Application: 

1 . (Currently Amended) A method for providing information on a plurality of users 
to a plurality of requestors over the Memet, comprising: 

storing information on the plurality of users in a database located on a cookie 
management system and associating the information with a plurality of keys; 

receiving a request at the cookie management system for mformation on a particular user 
from a requestor over the Mtemet; 

receiving both a user-supplied password and a key associated with the request at the 
coolde management system from the requestor over the Litemet, the key associated with the 
request included in a coolde on a machine of the particular user, wherein the key associated with 
the request is retrieved from the machine of the particular user by the requestor, and wherein the 
user-supphed password is obtained from the particular user by the requestor and grants the 
requestor permission to use the information on the particular user in the coolde management 
system; 

using both the user-supphed password and the key associated with the request to retrieve 

the hxformation on the particular user fi-om the database; and 

foi-warding the information on the particular user to the requestor over the Intemet^ 
wherein the requestor detemiines whether the coolde exists on the user machine, 

generates and stores the coolde on the user machine when the coolde does not exist, and provides 

the information on the user to the coolde management system . 

2. (Original) The method as set foi1h in claim 1, wherein storing information 
comprises associating a different key for information on each user. 

3. (Original) The method as set forth in claim 1, wherein storing information 
comprises storing multiple sets of infoimation for at least some of the users with each set of 
information being associated with a different key. 
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4. (Original) The method as set forth in claim 1, further comprising checking that 
the requestor is authorized to obtain the information on that particular user. 

5. (Canceled) 

6. (Original) The method as set forth in claim 1, wherein forwarding comprises 
sending the information in XML format. 

7. (Original) The method as set forth in claim 1, further comprising receiving new 
information on the user from the requestor and updating the database with the new information, 

8. (Original) The method as set forth in claim 1, further comprising selecting an 
available key for a user and supplying the new key to a requestor so that the requestor can store 
the new key as a coolde on a user's machine. 

9. (Currently Amended) A method of obtaining information on users, comprising: 

receiving at a requestor website a request over the Intemet from a user's machine; 

retrieving a coolde from the user's machine , the retrievinR including the requestor website 
detemiinhiR whether the cookie exists on the user's macliine, ReneratinR and storing; the coolde 
on the user's macliine when the coolde does not exist, and providing information on the user to a 
coolde manaRement system ; 

obtaining a key stored as part of the coolde; 

receiving a user-supplied password from a user to the requestor website, the password 
granting the requestor website permission to use the information on the user in thea coolde 
management system; 

sending a query over the Intemet from the requestor website to the coolde management 
system for data associated with the key, the query including both the key retrieved from the 
coolde and the user-supplied password; and 
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receiving the data associated with the key, wherein the data includes information on the 

user. 

10. (Original) The method as set forth in claim 9, wherein receiving the data 
comprises receiving the data in XML format. 

11. (Canceled) 

12. (Original) The method as set forth in claim 9, fiirther comprising using the data 
on the user in responding to the usefs request. 

13. (Original) The method as set forth in claim 9, wherein retrieving the coolde 
comprises retrieving a plurality of cooldes from the user's machine. 

14. (Currently Amended) The method as set forth in claim 9, ftirther comprising 
receiving a request from a second user's machine, checldng for a coolde on the second user's 
machine, sending a query for an available key when the second user's machine does not contaui 
any cookie, and placing the coolde with the available key on the second user's machine. 

15. (Original) The method as set forth in claim 9, ftirther comprising obtaining new 
information on the user and sending the new information and the key over the hitemet. 

16. (Currently Amended) A system for storing information on a plurality of users and 
for providing the information to a plurality of requestors, comprising: 

a database for storing information on the plurahty of users and for associating the 
information with a plurality of keys; 

a coolde management system for receiving a request over the Intemet from a requestor 
for information on a particular user, the request including both a user-supplied password and a 
key stored as part of a coolde on a machine of the particular user, wherem the key associated 
with the request is retrieved from the machine of the particular user by the requestor, and 
wherein the user-supphed password is obtained from the particular user by the requestor and 
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grants the requestor permission to use the information on the particular user at the coolde 
management system; and 

a retrieval unit for receiving the key and the user-supplied password and for retrieving the 
information associated with that key; 

wherein the cookie management system obtains the information from the retrieval unit 
and forwards the information on the particular user to the requestor^ 

wherein the requestor detennines whether the coolde exists on the user machine, 
generates and stores the coolde on the user machine when the cookie does not exist, and provides 
the information on the user to the coolde management system . 

17. (Original) The system as set forth in claim 16, further comprising a key assignor 
for assigning available keys to new users in the database. 

18. (Original) The system as set forth in claim 16, further comprising an update unit 
for storing new information on users in the database. 

19. (Original) The system as set forth in claun 16, further comprising a verifier for 
verifying that the requestor is authorized to receive the information on the particular user. 

20. (Previously Presented) The system as set forth in claim 16, wherein the coolde 
management system forwards the information on the particular user to the requestor in XML 
format. 

21 . (Previously Presented) The method as set forth in clahn 1, wherein associating 
the information with a plurality of keys includes associating the information with the plurality of 
keys according to different categories or levels of the information on the particular user and the 
method further comprises: 

receiving a plurality of the user-supplied passwords, each corresponding to each of the 
keys; and 
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using only the user-supplied passwords to retrieve the information on the particular user from the 
database, wherein the user-supphed passwords correspond to an amount and type of the 
information that the particular user wants to the requestor to have. 

22. (Previously Presented) The method as set forth in claim 9, fiirther comprising: 

associating information on the user with a pluraUty of the cookies according to different 
categories or levels of data on the user; 

receiving a plurality of the user-supphed passwords, each corresponding to each of the 
cooldes; and 

receiving the data associated with the user-supphed passwords, wherein the user-supphed 
passwords correspond to an amount and type of the information that the user wants to the 
requestor to have. 

23. (Previously Presented) The system as set forth in claim 16, wherein the database 
associates the infonnation with the plurality of keys according to different categories or levels of 
the infonnation on the particular user; 

wherein the cookie management system fiirther receives a plurahty of the user-supphed 
passwords, each corresponding to each of the keys; and 

wherein the retrieval unit receives only the user-supphed passwords to retrieve the information 
associated with the user-supphed passwords, the user-supphed passwords corresponded to an 
amoimt and type of the information that the particular user wants to the requestor to have. 

24. (New) The method as set forth in claim 1, wherein the requestor provides the 
infonnation on the user to the cookie management system after writing the coolde on the user 
machine so that the information is stored in the coolde management system only after the 
requestor laiows that the coolde is successfully written to the user macliine. 

25. (New) The method as set forth in claim 9, wherein providing at the requestor the 
hoformation on the user to the coolde management system comprises providing the information 
on the users to the coolde management system after writmg the cooldes on the user's machine so 



36968/248469 



U.S. Serial No. 09/746,325 
Page 7 

that the mfomiation is stored in the coolde management system only after the requestor Icnows 
that the coolde is successftxUy written to the user's machine. 

26. (New) The system as set forth in claun 16, wherein the requestor provides the 
information on the user to the cookie management system after writing the cookie on the user 
machine so that the information is stored in the coolde management system only after the 
requestor Icnows that the coolde is successfiiUy written to the user machine. 
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